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English Abstract 

...that allows service providers, consumer electronic (CE) manufacturers 
or standards bodies to define flexible security policies (110) for the 
execution of downloaded applications (120) on digital television (DTV) 
receivers (160) . The. . . 

...For example, environmental factors such as time of day, date, channel 
currently tuned in, parental lockout status, grouping of major and 
minor virtual channels, and so forth, may be considered. An access 
controller (168) determines if the receiver's environmental factors 
satisfy the conditions for granting a permission. . . 

...allow access to the receiver functions (161), receiver resources and 
user private data. The security policy can be modified by installing o 
downloading a new security policy (110), or modified by a user with th 
provision of an appropriate interface. A Java... 
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Detailed Description 

five francs per dollar would 
have a transaction amount of two hundred dollars. 

Next, central controller 200 calculates the 
transaction amount in domestic currency using the 
prevailing exchange rate on the day transaction data 70 is 
received by central controller 200. For example, if the 
prevailing exchange rate is four francs per dollar when 
the. . . 

...example, withdraws one thousand francs from ATM 440. if 
the user wants to use the locked -in rate of insurance 
policy 60, the traveler enters the tracking number of 
insurance policy 60 into ATM 440 (step 1320) . In addition 
to the amount of withdrawal and tracking ... the cash at the prevailing 
rate (step 1420) . 

If the tracking number is found, central 

controller 200 compares the prevailing exchange rate to 
the locked -in exchange rate of insurance policy 60 (step 
1430) . If the exchange rate specified in insurance policy 
60 is not more favorable than the prevailing rate (step 
1440), ATM 440 is instructed... 

...exchange rate (step 

1450) . This prevents the end user from invoking a claim 
under insurance policy 60 if the prevailing exchange rate 
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is less favorable or equal to the prevailing rate... 

...updates the remaining amount of 

coverage in end-user account database 290 (step 1530) . 

Central controller 200 instructs ATM 440 to 

present the end user with currencies at the locked -in 

exchange rate of insurance policy 60 (step 1540) . In 

order to compensate the bank operating ATM 44 0 for the 

exchange rate loss associated with the transaction, 

central controller 200 electronically transfers the amount 

of currency equal to insurance adjustment 80 to the bank... a flowchart 

illustrating a preferred 

process for determining whether insurance adjustment 80 is 
necessary. Central controller 200 processes transaction 
data 70. Central controller 200 searches insurance policy 
database 265 for the tracking number transmitted by bank 
460 (step 1700) . If central controller 200 does not find 
the tracking number in insurance policy database 2 65 (step 
1710), central controller 200 instructs bank 460 to 
exchange the end user's money at the prevailing exchange... 

...number is found, then 

the exchange rate provided by bank 460 is compared to the 
locked -in exchange rate specified in insurance policy 60 
(step 1730) . If the locked -in rate is not more favorable 
(step 1740), then central controller 200 instructs bank 
- 22 

460 to exchange the end user's money at the prevailing 
exchange rate (step 1750) . If the locked -in rate is more 
favorable, central controller 200 checks the remaining 
amount of coverage (step 1760) . If no coverage remains, 
central controller 200 instructs bank 460 to exchange the 
end user's money at the prevailing exchange... 

...If the coverage is not exhausted, however, 

insurance adjustment 80 is required (step 1780) . Central 
controller 200 then calculates the amount of insurance 
adjustment 80 as described above in connection with. . .provides the credit 
card 

number and the tracking number, and the Web site verifies 
insurance policy 60 with central controller 200. Once 
verified, the Web site provides the tickets at the 

locked -in rate specified by insurance policy 60 and 
receives compensation from central controller 200 for the 
amount of insurance adjustment 80. 

Insurance policy 60 tracking number can also be 
used in the conversion of digital cash from one... 

...a quantity of digital 

cash to be converted along with the tracking number of 
insurance policy 60 to an online bank offering foreign 
exchange. The bank verifies the validity of insurance 
policy 60 with central controller 200, and accesses the 
locked -in exchange rate of insurance policy 60. Assuming 
the locked -in rate is more favorable and sufficient amount 
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of coverage remains, the bank completes the conversion of 
funds at the locked -in exchange rate, electronically 
transferring the new currency back to the end user for 
storage. . . 

. . . Lundquist, Digital Money, John Wiley & 

Sons (1996); or Seth Godin, Presenting Digital Cash 
(1995) . 

Central controller 200 can also create a digital 
code incorporating all of the information in insurance 

policy 60. This digital code is encrypted with a private 
- 24 

key of central controller 200 and transmitted to the end 
user. The end user presents this digital code to. . . 

...for currency exchange. The bank 

decrypts the digital code with the public key of central 
controller 200 and extracts all of the details of 

insurance policy 60, allowing the bank access to the 
locked -in exchange rate without having to contact central 
controller 200. The bank is assured that the digital code 

is legitimate because only central controller 200 has 

access to the private key that originally encrypted the 

I 0 digital code... 
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system; (2) to 

perform the same task based on real-time learning, both in the 

controller and in the model of the plant. More conventional 
tethniquas fall short of these capabilities .may not be necessary here. 
However, AAC 

has recently demonstrated a new, far more efficient controller 
for telerobotic robot arms, tested on a physical prototype of 
the space shuttle; main arm. . . 

.affordable. A purely robotic 

approach to extracting NTM would require even greater 
intelligence in the controller , makino ADP even more essential 
a-s part-of a rather complex system. 
The long. .. avionics and of temperature). 
Sustainable development on earth is also a leading 
strategic priority for policy at a national level, cutting 
across all agencies. Current concerns about sustainable 
development are in. fuel-cell car. Bench-scaie work by 
Neurodyne, funded by NSF, suggests that an ANN controller can 
convert even existing cars to ultralow emission vehicles; 
tests on an actual Saturn engine ... component ADP designs running 
successfully 

- a 1993 report from Jameson (of Jameson Robotics, formerly of 
Lockheed Texas) and a brief 1994 paper by Santiago and myself. 
(See R. Santiago and P ... precisely, they report a 100% failure rate for 
the two 

component AD? design and conventional controllers , and an 80% 
success rate for the three-component design, using a loose 
definition of... 

. on) to expect 

that ordinary ADP systems will actually be more stable than 
conventional adaptive controllers , when well-designed; 
however, the modifications required for the global 
coordination problem erode these phenomena ... an 
application where computers might order attacks on human 
beings. (For a discussion of adaptive controllers , see P. 
Werbos, Control circuits in the brain: Basic principles, and 
critical tasks requiring engineers... 

.ANN work at Ames. Extensive 

presentations were made at this conference by McDonnell 
Douglas, by Lockheed , and by people at NASA working with 
McDonnell-Douglas . 

The challenge here is simply to. . . 

.The estimates of A and B are then fed into a 

classical linear-quadratic optimal controller , of the form 
given in the classical textbook of Bryson and Ho. (See A. E. 
Bryson and Y. C. Ho. Applied Ciptimal Control. Ginn, 1969.) 
Since the controller itself is a classical controller , not 
itself changing over time, the speaker from NASA Dryden said 
that this arrangement will... 

.much easier to flight-certify 

than any design involving true real-time learning in the 

controller itself. 
Phase II is planned to use a true real-time learning 
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system, in collaboration. for optimal performance.) But then we face an 
interesting task: how to design an optimal controller , 
offline, like the Bryson and Ho controller , but optimal for 
the actual nonlinear stochastic model — so as to permit 

better recovery even... op. cit.[17]) in the offline simulations, in order 
to be 

sure that the resulting controller is more robust with respect 
to the details of the model. This general two-step... 

.that approach. As with the Phase I design, it involves the 
offline develcnment of the controller , which should minimize 
the problems th flight testing and verification. From a 

scientific viewpoint, this. . . 

.for more familiar changes, it 

is better to use higher-order approaches (such as TLRN 

controllers rather than real-timie learning. (The system 
presented by Lockheed at this conference also exploits this 
kind of principle; however, the Phase IB approach proposed. . . 
approximation abilities. In this problem, one learns to input 
a maze description, and output a policy or value function, 
without having to relearn the policy when one encounters a new 
maze. Thus the present invention implements a new form of... to high 
quality performance. 

Until we implement Critics capable of solving such problems, 
our "intelligent controllers " will fail short of true brainlike 
capabilities in a very important way. 
The problem of. . .this very 

simple maze problem, it would seriously undermine all our 
hopes to build intelligent controllers with neural networks. 
This particular maze was chosen — in advance — to be 
especially tricky, with. . . 
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connection 

to a serial link 31 to a media server display and keyboard 

32 The controller servers 28, 29 run a conventional 
operating system (such as Windows NT or UNIX) to provide a 
hot-failover redundant configuration. An active one of the 
dual redundant controller servers 28, 29 functions as a 
media server controller for the video file server 20. The 
5 active one of the controller servers 28, 29 also allows 
management and control of the server resources from the 
network. . . 

...address (IP) and the number of buffers 

for network communication. The active one of the controller 
servers 28, 29 may also provide lock management if lock 
management is not provided by the integrated cached disk 
array 23, 

For multi-media data transfer, the active one of the 

controller servers 28, 29 assigns one of the stream servers 
21 to the network client 54... 

. . . to 

communicate with any one of the stream servers 21, The 

active one of the controller servers 28, 29 ...send or receive data to 
or from the client. 

Alternatively, the active one of the controller servers 28, 
29 could communicate with a switching mechanism such as the 
ATM switch 53. . . 

. . . connections 

40 among the integrated cached disk array 23, the optional 
tape silo 24, the controller servers 28, 29, and the stream 
servers 21, The integrated cached disk array 23 includes... 

...links to each of 

the stream servers 21 and to each of the dual redundant 

controller servers 28, 29* 
The tape silo 24 includes an array of SCSI adapters 50 
and. . . 

. . . link to a respective one 

of the stream servers 21 or each of the redundant controller 
servers 28, 29, The read/write stations 51 are controlled 
robotically in response to commands from the active one of 
the controller servers 28, 29 for tape transport functions, 
and preferably also for mounting and unmounting of... Patent No. 
5,335,352, issued Aug, 2, 1994y 

and entitled Reconf igurable, Multi-Function Disc Controller , 
incorporated herein by reference. The cache memory 41 is 
constructed on a number of additional .. .APIs ) for developing and 
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porting file service protocols (such as NFS) . 
In the processors of controller servers 28, 29, a 
software application is run by a general purpose operating 
system such. . . 

.video file server only 

through the software application executing on an active one 
of the controller servers 28, 29. This software application 
executes as a central control to prevent the video... 
. from the underlying 

data stream. The application software running on a active 
one of the controller servers 28, 29 includes an admission 
control program. The kernel program 63 includes a real-time 
5 scheduler. The admission control program running on the 
active one of the controller servers 28, 29 applies an 
admission control policy to determine whether a service 
request can be satisfied, and if so, sends the stream. . . 

. their 

real-time schedulers tc schedule operations to satisfy the 
service request. The admission control policy considers the 
global resources available to satisfy the request, including 
the current loading of the. . . 

.stream servers is selected to perform the required 

operation, and the active one of the controller servers 28, 

29 transmits an associated operational command over the 

local Ethernet (26 in FIG the controller 

servers 28, 29, Preferably, one or more of the stream 

servers 21 are kept in... 

.the other stream 

servers that fails to acknowledge commands from the active 
one of the controller servers 28, 29 or is otherwise found 
to experience a failure . 
The software 60 further. . . 
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